Halting $9.8 Billion in Theft Is Key to Crypto Growth, KPMG Says

(Bloomberg) -- The cryptocurrency market needs to improve how it secures digital assets for the $245 billion industry to keep growing, according to KPMG.

At least $9.8 billion in digital assets have been stolen by hackers since 2017 because of lax security or poorly written code, the accounting firm wrote in a report released Monday. Adoption of cryptocurrencies such as Bitcoin and Ether among institutional investors has led to competition for a place in portfolios, making safeguarding the tokens more important that ever, KPMG said.

“Institutional investors especially will not risk owning crypto assets if their value cannot be safeguarded in the same way their cash, stocks and bonds are,” Sal Ternullo, co-leader of KPMG's crypto-asset services and co-author of the report, said in a statement. Among the first companies to offer custody services for crypto are Fidelity Investments and units of the exchanges run by Intercontinental Exchange Inc., Coinbase Inc. and Gemini Trust Co.

Cryptocurrencies are a bearer instruments like cash or certain type of bonds, meaning whoever holds them is the owner. Yet the thing that's held -- known as a private key -- is a random string of characters kept in a digital wallet or on a piece of paper. When a user loses that key, or has it stolen, the asset is gone forever. That makes key custody a challenge for traditional financial firms accustomed to guarding non-digital assets.

Previously: Winklevoss Brothers' Exchange Creates Insurer to Protect Crypto

“As crypto-assets proliferate, custodians have a tremendous opportunity to profit -- both by earning management fees for delivering straightforward custodian services, and also by offering adjacent services only possible in the emerging crypto ecosystem,” KPMG said in its report.

The industry needs to contend with heightened rules on storing cryptocurrencies for customers, KPMG said. As with all financial transactions, banks and brokers must abide by know-your-customer and anti-money laundering rules. Even established financial institutions with mature compliance programs in place must “enhance their methodologies to address the unique considerations for crypto-assets and related data-management challenges,” according to the firm.

To contact the reporter on this story: Matthew Leising in Los Angeles at mleising@bloomberg.net

To contact the editors responsible for this story: Michael J. Moore at mmoore55@bloomberg.net, Josh Friedman, Dan Reichl

©2020 Bloomberg L.P.